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© A security system and method is provided for 
one way communication between a remote transmit- 
ter (20) and a receiver (40) which enables a function 
such unlocking the doors or disarming a security 
system. The system uses a three part security code 
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having one part which is a pseudo-randomly gen- 
erated function, one part which is a permanently 
assigned code , to the transmitter/receiver combina- 
tion and one part which is based on the number of 
transmissions transmitted by the transmitter. 
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The present invention relates generally to a 
remote controlled security system and in particular 
to a security system using synchronized one-way 
transmissions wherein synchronization is main- 
tained between the transmitter and receiver even 
after inadvertent activations of the transmitter. 

Many security systems are available where a 
push button remote transmitter enables a function 
in the vehicle such as unlocking the doors or 
turning off an alarm. Such systems may have the 
remote control unit emit a fixed identification code 
exclusive to the transmitter/receiver combination. 
However, a security system using a fixed code can 
be defeated by using a random scanning device 
which transmits random codes in rapid succession 
in hopes of reproducing a valid code. Security is 
increased in such a system by increasing the num- 
ber of combinations in the security code, i.e., in- 
creasing its length. 

The fixed code system can also be defeated 
using a recording device which captures and then 
duplicates transmissions of the security code from 
a valid transmitter. 

Other security systems are known which use a 
security code that changes after each transmission, 
thereby eliminating the possibility of a transmission 
being recorded and retransmitted because an exact 
duplicate of the previously transmitted signal will 
be accepted by the receiver. 

One known method of changing the security 
code uses a look-up table in both the transmitter 
and receiver which is indexed every time a trans- 
mission is made. One problem with such a system 
is that if the transmitter is operated outside the 
receiver range, the transmitter will no longer be 
synchronized with the receiver and will be unable 
to control the system. To alleviate this synchroniza- 
tion problem, two-way transmissions using a "han- 
dshaking" technique have been used to ensure that 
the transmitter and receiver are indexed simulta- 
neously. However, the need to have both a trans- 
mitting and a receiving capabilities in the remote 
control unit and the in-vehicle apparatus is un- 
desirable. 

A security system described in U.S. Patent 
4,847,614 employs a one-way transmission meth- 
od. A digital code is stored in the system memory 
and is changed in both the transmitter and receiver 
by using digital logic gates to operate on the bits to 
produce the next code of the sequence after each 
transmission. This system also suffers from syn- 
chronization problems which if severe enough, will 
result in the operator using a key to manually 
unlock the door. If the system is less than 10 steps 
out of sink, the system automatically resynch- 
ronizes itself. If the system is between 10 and 256 
steps out of sink, two successive transmissions 
must be made. This situation would happen quite 



frequently resulting in a perception of poor perfor- 
mance from the customer. Furthermore, after 
changing the transmitter battery, the transmitter will 
have lost synchronization. 
5 The security system described in U.S. Patent 

5,159,329 uses a security code portion which has a 
fixed portion and a portion which varies according 
to a specified algorithm. The system advances the 
alterable portion of the code word after each trans- 
w mission. The problem with such a system is that 
once the transmitter is activated outside the range 
of the control device the transmitter and control 
device are then out of synchronization. The system 
can be reset by the use of a mechanical switch 
75 inside the vehicle. This situation would happen 
quite frequently and would be perceived as poor 
performance by the customer. 

It would be desirable to have a remote control 
system using one-way transmissions and a rolling 
20 code that is not dependent on the synchronization 
of the transmitter and receiver. 

It is therefore an object of the invention to 
provide a system with a rolling code not dependent 
on synchronization. 
25 The present invention uses one-way transmis- 

sions between the transmitter and receiver and 
does not rely solely on transmission of a predeter- 
mined code stored in memory. Rather, pursuant to 
each new transmission, a security code is formed 
30 having three portions including a rolling code which 
is not dependent on the last transmitted security 
code. More specifically, the transmitter has a 
counting means for providing a count of the num- 
ber of transmissions made by the transmitter, a 
35 first storing means for storing an identification code 
assigned to the transmitter, and a first calculating 
means for calculating a first rolling code using a 
predetermined formula. The transmitter further in- 
cludes a transmitting means for transmitting a se- 
40 curity code having an identification code portion, a 
transmission count portion, and a rolling code por- 
tion. The receiver includes a receiving means for 
receiving the security code and reproducing the 
identification code portion, the transmission count 
45 portion and the rolling code portion. The receiver 
further includes a second storing means for storing 
the identification code, a third storing means for 
storing the last transmission count received from 
the transmitter, a second means for calculating a 
50 second rolling code using the same predetermined 
formula, a first comparing means for comparing the 
identification code portion with the identification, a 
second comparing means for comparing the rolling 
code portion with the second rolling code, and a 
55 third comparing means for comparing the transmis- 
sion count portion with the last transmission count. 

The invention will now be described further, by 
way of example, with reference to the accompany- 
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ing drawings, in which : 

Figure 1 is a block diagram showing the appara- 
tus of a preferred embodiment of the present 
invention. 

Figure 2 is a flow chart of a preferred method of 
operating the remote control system. 
Referring now to Figure 1, a transmitter 20 is 
provided to send a security code to a receiver 40 
which enables a function such as unlocking a door 
or disabling an alarm. The one-way signal 30 trans- 
mitted by transmitter 20 can be a radio frequency 
or infrared transmission, for example, using known 
apparatus for transmitting digital information. 

When the user wants a function to be ac- 
tivated, the security code is activated causing the 
security code to be activated. Transmitter 20 has a 
transmission counter 22 which stores and updates 
the number of transmissions (i.e. button activations) 
made by transmitter 20. Transmission counter 22 
stores the value in volatile memory which is 
cleared if the transmitter battery (not shown) is 
removed. 

Transmitter 20 also has an identification code 
memory 24 which stores a fixed identification code 
assigned to the transmitter and receiver. The iden- 
tification code is held in nonvolatile memory (e.g. 
ROM) so it is not erased if power to transmitter 20 
is interrupted. 

Transmitter 20 also has a roiling code gener- 
ator 26 which calculates a non-repetitive rolling 
code based on the transmission count value. The 
calculation preferably employs a linear congruential 
method of generating random numbers, such as is 
described in "The Art of Computer Programming, 
Vol. 2, Semi-Numerical Algorithms" by Donald E. 
Knuth. The rolling code is calculated in response to 
activation of push button 21. A preferred formula 
used for calculating the rolling code is as follows: 

Rolling code =((a * Transmission Counter) +c) 
mod m 

where "a" is selected such that: 
If "m" is a power of 2, pick "a" so that (a mod 
8) = 5 

If "m" is a power of 10, choose "a" so that 
(a mod 200) = 21, 

"a" is larger than "m", preferably larger m /100 
but, smaller than (m-SQRT m). 
"c" can be any number chosen which at least 
conforms to the foiiowing: 

"c" is an odd number when "m" is a power of 

two. 

"c" is not a multiple of 5 when "m" is a power 
of 10. 

"m" should be selected such that it is the 
largest value possible so that the computer word 
length is not exceeded. 
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The rolling code is preferably calculated ex- 
actly with no round-off error. 

The security code is a combination of the 
values in transmission counter 22, identification 
5 code memory 24 and rolling code generator 26. 
The security code is formed and transmitted by an 
encoder 28. 

Receiver 40 has a decoder 42 which receives 
the security code generated by transmitter 20 and 
w separates it back into the three distinct portions. 

Receiver 40 has an identification code memory 
41 with the same value as transmitter 20 stored in 
nonvolatile memory. Receiver 40 also has a last 
transmission count memory 48 which stores the 
15 last transmission count previously sent by transmit- 
ter 20. The value in last transmission count mem- 
ory 48 is not updated until a valid code is sent and 
the function of the system is enabled. 

When decoder 42 receives the security code, 
20 the rolling code generator 50, using the same for- 
mula as transmitter 20, calculates the rolling -code 
based on the received transmission count. 

If the values received from transmitter 20 cor- 
respond to the values generated in receiver 40 in 
25 the following manner then comparator 44 generates 
a signal to enable the designated function: 1) the 
value in identification code memory 41 must be 
equal to the identification code received; 2) the 
value calculated by rolling code generator 50 must 
30 be equal to the roiling code value received; and 3) 
the transmission count value received must be 
greater than the value in last transmission count 
memory 48. 

Because the transmission count value received 
35 from the transmitter need only be greater than the 
value in last transmission count memory 48, syn- 
chronization is not lost if the value in the transmit- 
ter counter 22 is incremented while outside the 
range of receiver 40, 
40 Referring now to Figure 2, a flow chart is 

shown for the sequence of steps to be executed in 
the receiver as a preferred method of operating the 
invention. 

The operation sequence is started at step 60 
45 where the receiver waits until a transmission is 
detected- When a transmission is received, the 
security code is broken down into its three seg- 
ments. The system has three separate checks be- 
fore enabling a function. Step 62 checks to see if 
so the transmitted identification code portion (TIC) is 
equai to the value stored in the identification code 
memory of the receiver. If the identification codes 
are not equal, step 64 is executed which ignores 
the transmission as invalid and returns to the be- 
55 ginning of the sequence. If the identification codes 
are equal, step 66 is executed which checks if the 
expected rolling code (eRC) calculated by the re- 
ceiver using the received transmission count value 
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is the same as the received rolling code (rRC) 
calculated in the transmitter using the same math- 
ematical function operating on the transmission 
count value. If the rolling codes do not match, step 
64 is executed where the transmission is ignored 
as invalid and the sequence starts over again at 
step 60. If the rolling codes are equal, step 68 is 
executed which checks whether the received trans- 
mission counter (rTC) value is greater than the last 
received transmission counter value (IrTC) stored in 
the memory of the receiver. This step is not an 
equivalence as in the prior art because the trans- 
mitter may have been activated outside the range 
of the receiver and the transmission counter of the 
transmitter would be higher than that of the re- 
ceiver. This eliminates the need for exact synchro- 
nization of the transmitter and receiver. If the re- 
ceived transmission counter value is greater than 
the last transmitter value stored in the memory of 
the transmitter, the transmitted signal is identified 
as valid and step 70 is executed which performs a 
function such as opening a door or turning off an 
alarm system. After a function is enabled in step 
70, the received transmission counter value (rTC) is 
placed in the last received transmission counter 
(IrTC) value memory of the receiver in step 72. 

In the event that the battery in the transmitter 
is changed, the transmitter memory will be lost and 
the transmission count value reset to zero. Return- 
ing back to step 68, if the received transmission 
counter value was less than or equal to the last 
transmission counter value stored in the memory of 
the receiver, step 74 is executed. Step 74 checks 
whether the received transmission counter value is 
less than a predetermined number, such as 50. If 
the value is 50 or greater, step 64 is executed 
which ignores the transmission as invalid. If the 
value is less than 50, step 72 is executed where 
the received transmission counter value is then 
placed in the last received transmission counter 
memory of the receiver. After a battery change, the 
transmitter can be activated twice in the presence 
of the receiver in order to reset the receiver trans- 
mission count value and then enable the desired 
function. The number 50 allows for some inadver- 
tent activations after the battery change until the 
first activation within the range of the receiver. 

Claims 

1. A security system comprising: 

a transmitter (20) including: 

counting means for providing a count of 
the number of transmissions made by said 
transmitter; 

first storing means (24) for storing an iden- 
tification code assigned to said transmitter; 

first calculating means (26) for calculating 



a first rolling code using a predetermined for- 
mula; 

transmitting means (28) for transmitting a 
security code having an identification code 
5 portion, a transmission count portion, and a 

rolling code portion; and 
a receiver (40) including; 
receiving means (42) for receiving said 
security code and reproducing said identifica- 
70 tion portion, said transmission count portion 

and said rolling code portion; 

second storing means (41) for storing said 
identification code; 

third storing means (48)for storing the last 
75 transmission count received from said trans- 

mitter; 

second calculating means (50) for calculat- 
ing a second rolling code using the same 
predetermined formula; 

20 comparing means (44) for comparing a) 

said identification code portion with the value 
in said second storing means; b) said rolling 
code portion with said second rolling code; and 
c) said transmission count portion with said 

25 last transmission count. 

2. A security system as claimed in claim 1, 
wherein said first and second calculating 
means calculate said first and second rolling 
30 codes based on the said count of the number 

of transmissions made by said transmitter and 
said received transmission count portion, re- 
spectively. 

35 3. A security system as claimed in claim 1, 
wherein said counting means has a volatile 
memory. 

4. A security system as claimed in claim 1, 
40 wherein said formula generates non-repetitive 

code values for all values of said count. 

5. A security system as claimed in claim 1 
wherein said formula comprises: 

45 

Rolling code = ((a " Transmission Counter) +c) 
mod m 

where "a" is selected such that when "m" 
so is a power of 2, "a" satisfies the formula (a 

mod 8) -5, when "m" is a power of 10, "a" 
satisfies the formula (a mod 200) = 21 and, "a" 
is larger than m, preferably larger m/100 but, 
smaller than (m-SQRT(m)); 
55 "c" is chosen to be an odd number when 

"m" is a power of two and not to be a multiple 
of 5 when "m" is a power of 10; 

"m" is so it is the largest value possible so 
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that the computer word length is not exceeded. 

6. A method for deactivating a security system 
having a transmitter and a receiver comprising 

the steps of: 5 

activating a transmitter to emit a security 
code; 

incrementing and storing a transmission 
counter in said transmitter; 

generating a rolling code value based on a 10 
known function in said transmitter; 

transmitting a security code having a 
transmitter identification code portion, trans- 
mission counter portion, and rolling code value 
portion; 75 

receiving the security code in said receiv- 
er; 

verifying the transmitter identification code 
transmitted is the same as the transmitter iden- 
tification code stored in the memory of said 20 
receiver; 

calculating a rolling code in said receiver 
based on the transmission counter received 
from said transmitter with the same function 
used in said transmitter; 25 

verifying the transmitted rolling code is 
equivalent to the rolling code calculated in said 
receiver; 

verifying the transmission counter number 
received from said transmitter is greater than 30 
the last transmission counter number stored in 
said receiver; 

enabling a function after the transmitter 
identification code, rolling code, and transmis- 
sion counter have been successfully verified. 35 

7. A method as claimed in claim 6, wherein said 
formula comprises: 

Rolling code =((a * Transmission Counter) +c) 40 
mod m 

where "a" is selected such that when "m" 
is a power of 2, "a" satisfies the formula (a 
mod 8) = 5, when "m" is a power of 10, "a" 45 
satisfies the formula (a mod 200) = 21 and, "a" 
is larger than m, preferably larger m/100 but, 
smaller than (m-SQRT(m)); 

"c" is chosen to be an odd number when 
"m" is a power of two and not to be a multiple so 
of 5 when "m" is a power of 10; 

"m" is so it is the largest value possible so 
that the computer word length is not exceeded. 

8. A method as claimed in claim 6, wherein fur- 55 
ther comprising the step of setting the last 
received transmission count value to the trans- 
mission count value transmitted by the trans- 



mitter if the transmitted transmission count val- 
ue is less than 50. 

9. A security system transmitter comprising: 

counting means for providing a count of 
the number of transmissions made by said 
transmitter, 

storing means for storing an identification 
code assigned to said transmitter; 

calculating means for calculating a first 
rolling code using a predetermined formula; 
and 

transmitting means for transmitting a secu- 
rity code having an identification code portion, 
a transmission count portion, and a rolling 
code portion. 

10. A security system receiver having: 

receiving means for receiving said security 
code and reproducing said identification por- 
tion, said transmission count portion and said 
rolling code portion; 

first storing means for storing said iden- 
tification code; 

second storing means for storing the last 
transmission count received from said trans- 
mitter; 

means for calculating a second rolling 
code using the same predetermined formula; 

first comparing means for comparing said 
identification code portion with said identifica- 
tion; 

second comparing means for comparing 
said rolling code portion with said second roll- 
ing code; and 

third comparing means for comparing said 
transmission count portion with said last trans- 
mission count. 
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